$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa File: 002e220d-5567-33ef-bd92-28d89dfe57f5.roa (raw, json) Hash identifier: bM9YAILXva54qc9YKoqK6YyGC3JZLSND36HLr7ojFH4= Subject key identifier: 3C:D7:E5:77:B5:E8:6D:CB:5B:15:47:48:A6:A1:06:F6:B8:F2:3B:33 Certificate issuer: /CN=b433860d-ab5d-45f4-a11e-f313b584710a Certificate serial: 010D0C9F4328584B1F0167B49868484BD1313E80 Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 14445 IP address blocks: 104.249.136.0/24 maxlen: 24 104.249.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:67:b4:98:68:48:4b:d1:31:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=49a63fb3-85f3-43bb-8cf1-ec3afd6f428b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e7:5d:a8:3a:85:24:e0:42:b8:b9:a4:b8:d8: be:58:7b:47:b0:0f:5d:9f:19:c2:56:ac:7e:df:6e: 69:08:f2:aa:e8:fd:83:76:79:64:8b:ba:5d:10:51: 28:52:8d:8c:7f:99:fc:66:dc:50:59:0c:a9:ce:31: b0:47:7d:97:5d:f1:69:c3:d1:3a:b3:93:82:1a:68: 54:a7:86:f8:d7:6e:19:1b:ac:d6:b3:4d:fe:40:0b: 3f:33:19:4b:4a:ff:84:55:6b:5f:7a:73:c7:d6:43: 4e:2a:de:09:df:60:d1:75:93:f0:14:a8:1d:71:29: 21:f1:ac:7b:56:00:76:0f:67:74:28:46:43:a6:d3: a6:52:01:ea:ae:1c:ca:9b:0e:86:3f:43:94:c1:d8: 5b:0e:26:de:d2:44:d8:03:c3:7e:34:5a:de:99:b2: f9:6c:03:df:80:e5:2f:25:ea:0f:db:2e:eb:8c:4f: 78:14:8c:e2:c6:a7:c9:81:dc:5e:ef:d0:e3:56:31: 77:91:e7:24:08:3f:0b:f7:1d:3f:40:07:ee:14:b2: 6c:07:84:6b:5b:5f:b0:dd:ca:15:64:98:16:3a:5f: 26:c2:64:b7:99:ef:8b:ea:c9:26:5d:ad:6c:92:83: 8b:96:7d:1b:cf:76:dd:d3:f7:19:a2:15:80:e5:c0: b2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D7:E5:77:B5:E8:6D:CB:5B:15:47:48:A6:A1:06:F6:B8:F2:3B:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/002e220d-5567-33ef-bd92-28d89dfe57f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl X509v3 Authority Key Identifier: keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer sbgp-ipAddrBlock: critical IPv4: 104.249.136.0/24 104.249.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:a0:f8:fb:cd:e6:53:87:46:55:4e:01:64:9e:81:22:e9:f4: 8a:21:51:94:a0:03:23:01:69:5a:9e:91:19:ba:a4:60:36:cd: 80:ef:c3:48:fb:11:b1:83:30:a7:8d:5b:a3:d7:d6:5e:c3:37: f6:24:9a:d9:7a:0a:fe:96:72:58:75:88:7a:bb:e7:84:58:3c: 03:be:e3:4f:83:29:a2:91:19:8d:34:4c:6d:00:75:66:c6:5f: 86:5c:0e:28:3a:bd:7b:07:cc:6a:d0:46:5e:d3:2a:9a:87:0a: f4:61:0f:b1:03:62:ed:d9:45:93:f6:d8:86:5b:0a:4c:19:0d: e4:ec:0e:9d:ff:04:87:8d:ff:d8:76:80:7e:66:fa:de:51:03: 18:86:f8:8c:b7:44:e7:d4:4b:cd:19:a4:6e:c7:59:21:eb:1b: c6:84:1d:1c:bc:be:74:7b:00:dc:48:0f:bf:04:95:bb:4e:1e: f8:1e:dd:4c:69:d8:0d:43:b0:4e:6b:e4:8b:79:cd:21:65:3f: 44:99:0b:e3:d3:41:2a:d5:36:36:f3:03:9f:35:cf:86:0e:84: e5:2d:6e:6a:93:99:c4:44:1b:a6:1d:0d:99:8b:e0:0b:3c:98: 3a:32:cd:3b:65:50:c1:a1:fb:e9:1f:28:e0:99:34:26:3a:a3: f1:85:58:78 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsfAWe0mGhIS9ExPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzMzg2MGQtYWI1ZC00NWY0LWExMWUtZjMxM2I1ODQ3 MTBhMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NDlhNjNmYjMtODVmMy00M2JiLThjZjEtZWMzYWZkNmY0MjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguddqDqFJOBCuLmkuNi+WHtHsA9dnxnCVqx+ 325pCPKq6P2Ddnlki7pdEFEoUo2Mf5n8ZtxQWQypzjGwR32XXfFpw9E6s5OCGmhU p4b4124ZG6zWs03+QAs/MxlLSv+EVWtfenPH1kNOKt4J32DRdZPwFKgdcSkh8ax7 VgB2D2d0KEZDptOmUgHqrhzKmw6GP0OUwdhbDibe0kTYA8N+NFrembL5bAPfgOUv JeoP2y7rjE94FIzixqfJgdxe79DjVjF3keckCD8L9x0/QAfuFLJsB4RrW1+w3coV ZJgWOl8mwmS3me+L6skmXa1skoOLln0bz3bd0/cZohWA5cCyLwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDzX5Xe16G3LWxVHSKahBva48jszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMz ODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEzYjU4NDcxMGEvMDAyZTIyMGQtNTU2Ny0z M2VmLWJkOTItMjhkODlkZmU1N2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjQzMzg2MGQtYWI1ZC00NWY0LWEx MWUtZjMxM2I1ODQ3MTBhL2I0MzM4NjBkLWFiNWQtNDVmNC1hMTFlLWYzMTNiNTg0 NzEwYS5jcmwwHwYDVR0jBBgwFoAUz9UTZdOGkQNiuVzEe6KxGXpl5VUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iNDMzODYwZC1hYjVkLTQ1ZjQtYTExZS1mMzEz YjU4NDcxMGEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaPmIAwQA aPmLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFmg+PvN5lOHRlVOAWSegSLp9IohUZSgAyMBaVqekRm6pGA2 zYDvw0j7EbGDMKeNW6PX1l7DN/Ykmtl6Cv6Wclh1iHq754RYPAO+40+DKaKRGY00 TG0AdWbGX4ZcDig6vXsHzGrQRl7TKpqHCvRhD7EDYu3ZRZP22IZbCkwZDeTsDp3/ BIeN/9h2gH5m+t5RAxiG+Iy3ROfUS80ZpG7HWSHrG8aEHRy8vnR7ANxID78ElbtO Hvge3Uxp2A1DsE5r5It5zSFlP0SZC+PTQSrVNjbzA581z4YOhOUtbmqTmcREG6Yd DZmL4As8mDoyzTtlUMGh++kfKOCZNCY6o/GFWHg= -----END CERTIFICATE-----Generated at Wed Nov 5 06:57:38 2025 by rpki-client